Shortening the Let's Encrypt Chain of Trust

Re:Shortening the Let's Encrypt Chain of Trust by SkiFire13 on Tuesday July 11, 2023 @06:46AM (#36679116)

Note that in this particular case you can still use alternative browsers that come with updated root CAs.

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by Karunamon on Tuesday July 11, 2023 @08:02AM (#36679777)

This will still break anything that uses a system webview.

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by hunter2_ on Tuesday July 11, 2023 @10:21AM (#36681365)

And also any apps that make API calls over HTTPS, regardless of webview, right? I believe they cannot use HTTP, only HTTPS. However, I'm unsure whether they can disable certificate verification. Presumably not, for the same reason...

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by KeepFlying on Tuesday July 11, 2023 @01:07PM (#36683935)

I think it was apple that forced the use of HTTPS in app APIs, not Google.

I don't believe android apps are locked to HTTPS as a rule, though obviously a lot of them likely don't have fallbacks.

[ Parent | on HN ]